openSUSE-SU-2026:20875-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20875-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:20875-1
- Upstream
- Related
- Published
- 2026-06-02T09:29:38Z
- Modified
- 2026-06-04T18:24:16Z
- Summary
- Security update for ovmf
- Details
-
This update for ovmf fixes the following issues:
- CVE-2026-25833: mbedtls: buffer overflow in the
x509_inet_pton_ipv6()function (bsc#1261476). - CVE-2026-25834: mbedtls: client accepts signature algorithm chosen by server even if not advertised in client hello (bsc#1261477).
- CVE-2026-25835: mbedtls: no pseudo-random number generator reseed when cloning an application (bsc#1261478).
- CVE-2026-34874: mbedtls: NULL pointer dereference in distinguished name parsing (bsc#1261469).
- CVE-2026-25833: mbedtls: buffer overflow in the
- References
-
- https://bugzilla.suse.com/1261469
- https://bugzilla.suse.com/1261476
- https://bugzilla.suse.com/1261477
- https://bugzilla.suse.com/1261478
- https://www.suse.com/security/cve/CVE-2026-25833
- https://www.suse.com/security/cve/CVE-2026-25834
- https://www.suse.com/security/cve/CVE-2026-25835
- https://www.suse.com/security/cve/CVE-2026-34874